Go Concurrency Patterns

• Verdict: Pass
• Confidence: Medium
• Analyzed: May 1, 2026, 5:31 AM
• Findings: 1
• Version: 1.0.0

Overview

This is an instruction-only Go concurrency reference skill with no runtime code or credentials, though its README includes user-directed remote/global installation commands worth verifying.

This appears safe as an instruction-only Go concurrency reference. Before installing, verify the external GitHub source in the README and decide whether to install it per-project or globally.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI04: Agentic Supply Chain Vulnerabilities

NoteMedium Confidence

What this means

If the user follows the README install command, they rely on an external source outside the registry metadata.

Why it was flagged

The README gives a user-directed install command that pulls from an external GitHub path, while the registry metadata lists the source as unknown and has no install spec. This is a provenance and install-source note, not evidence of automatic execution by the skill.

Skill content

npx add https://github.com/wpank/ai/tree/main/skills/backend/go-concurrency

Recommendation

Verify the GitHub repository and exact content before installing, and prefer project-local installation unless global availability is intended.